diogogpinto/filament-auth-ui-enhancer

Dangerous workflowscaution

One of four workflows uses pull_request_target, although no untrusted checkouts or script-injection patterns were detected. The workflow design deserves review because pull-request-target jobs can carry elevated trust implications.

Release historycaution

The package has six releases over about 694 days, with two releases in the last 12 months and a median interval of about 120 days. This is established but not especially rapid maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although v2.0.2 was released recently, this lack of current development activity is a meaningful maintenance concern.

Repo issue activitycaution

There is only one open issue and three open pull requests, but none were opened or merged during the last month. This indicates limited recent repository activity without showing severe abandonment.

Token permissionscaution

Three workflows declare top-level write permissions and one workflow lacks top-level permissions entirely. Broad write access increases workflow-maintenance risk compared with narrowly scoped permissions.